CVE-2026-105640

Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confirmation is disabled, without verifying that the provider authenticated ownership of the address. An attacker can set an OAuth identity's unverified provider email to a victim's address, which Plane matches directly to the victim's existing local account. The attacker can then log in to the victim's Plane account without knowing the victim's password. GitHub, GitLab.com, and Google are not affected because those providers return verified email addresses. This issue is fixed in 1.4.0.

• CWE-287
• CWE-290

• https://github.com/makeplane/plane/commit/b91b61c379908d9e451613dbca23fc3803e926d2
• https://github.com/makeplane/plane/pull/9289
• https://github.com/makeplane/plane/releases/tag/v1.4.0
• https://github.com/makeplane/plane/security/advisories/GHSA-7j95-vh8g-f365
• https://github.com/makeplane/plane/security/advisories/GHSA-7j95-vh8g-f365

Published

Oct 5, 2026

Last Modified

Oct 5, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105635Plane is an open-source project management tool. Prior to 1.…7.4
• CVE-2026-105636Plane is an open-source project management tool. Prior to 1.…9.9
• CVE-2026-105637Plane is an open-source project management tool. Prior to 1.…9.6
• CVE-2026-105638Plane is an open-source project management tool. Prior to 1.…9.1
• CVE-2026-105639Plane is an open-source project management tool. Prior to 1.…9.8
• CVE-2026-10564IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side …8.2
• CVE-2026-105641Plane is an open-source project management tool. Prior to 1.…9.8
• CVE-2026-105642Ghost is a Node.js content management system. From 6.56.0 un…8.8
• CVE-2026-105643Ghost is a Node.js content management system. From version 6…7.3
• CVE-2026-105644Ghost is a Node.js content management system. From 4.0.0 unt…6.8
• CVE-2026-105645Ghost is a Node.js content management system. From 5.37.0 un…4.9
• CVE-2026-105646Ghost is a Node.js content management system. From 4.0.0 unt…4.9